Security Engineer, Detection & Response

About NexHealth Our healthcare system is frustratingly analog. When you live in a world of one-tap car rides, meal delivery, and unlimited streaming, why do you have to call to schedule an appointment with a doctor and are still handed a clipboard to fill in a form? NexHealth’s mission is to accelerate innovation in healthcare. We’re doing this by connecting patients, doctors, and developers. We’re the first to fully automate the integration with health record systems, paving the way for a new generation of disruptive health-tech companies. Here's some of what we've accomplished: $125M Series C at $1B valuation Manage more than 75 million patient records 80%+ annual revenue growth Top 10% of Inc. 5000 (2022) Security at NexHealth Joining the security team at NexHealth means becoming a crucial part of a mission to accelerate innovation in healthcare. You'll play a vital role in securing customer data and safeguarding our platforms, ensuring the integrity of the advancements we bring to the industry. This is an opportunity to expand your expertise in various security domains, continuously learning and adapting as you help protect the future of healthcare. What You’ll Do: Identify essential detections, necessary logs, log sources, attributes, and platforms to write high value detection rules. Define, develop, test, and refine alerting rules to minimize false positives and improve our signal-to-noise ratio, ensuring our detection systems are both efficient and effective. Streamline response processes by creating detailed Incident Response (IR) runbooks and developing Security Orchestration, Automation, and Response (SOAR) capabilities to reduce manual intervention and enhance response times. Improve detection coverage and accuracy across all monitored systems and applications. Facilitate security incident response in a collaborative, cross-functional setting, and lead to the resolution from threats originating both internally and externally. Adapt, learn and grow to become a contributor across various areas of security within the broader team. What You’ll Bring: 6+ years of experience working on a Security team focused on building detection platforms, writing detections and automating responses. Experience with AWS cloud infrastructure, databases, data warehouses, and web applications; familiarity with SIEM tools is a plus. Proficient in scripting languages (e.g., Python) and SQL. Strong understanding of modern adversary TTPs (Tactics, Techniques, and Procedures). Demonstrated ability to collaborate effectively with colleagues, manage and execute tasks, and prioritize efforts to mitigate risks. NexHealth Values Solve the customer’s problems, not yours:

When making decisions, think from the perspective of the customer. It’s easy to make decisions that make our lives simpler, but not the customers. Do the things others are not willing to do:

As a Nexer, always go after the hardest problems. Pursue things at the highest quality. Move at the fastest pace. Take ownership:

Act like a founder. Own your roles, destinies, mistakes, behavior, and our mission. The buck stops with each of us - no blaming or excuses. Say what’s on your mind, with positive intent:

Be direct, proactive, transparent, and frequent in your communication. Default trust:

As a Nexer, you do not have to earn trust, trust is given to you by default. If we by default trust each other, our speed of communication, feedback, information sharing, and overall improvements will be a lot faster. Think in first principles:

We first identify the problem and then break it down to its fundamentals before diving into solutions. We constantly ask “why” to validate our assumptions. Here’s a glimpse into our interview process: You’ll talk with a NexHealth Recruiter. You’ll talk with the Hiring Manager on a video call. You’ll talk with Team Members on a video call. You’ll do a Panel Presentation or Working Session with a small panel.

#J-18808-Ljbffr